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Top Stories 

• Cabot Corporation agreed to spend over $84 million on state-of-the-art technology to 
control harmful air pollution at facilities in Texas and Louisiana and to resolve multiple 
violations of the Clean Air Act. - U.S. Environmental Protection Agency (See item 3) 

• A survey of mining companies found that 41 percent reported increased external threats, 
including cyberattacks, and found that sensors and safety systems increasingly linked to the 
Internet provide new external pathways for attackers to gain access to systems. - IDG 
News Service (See item 4) 

• The National Highway Traffic Safety Administration announced that beginning in 
November 2016 all new tour buses and intercity buses will require seat belts. - Associated 
Press (See item 8) 

• New analysis found that an earlier version of the Stuxnet industrial control systems 
malware could potentially have conducted much more physically destructive attacks. - 
Dark Reading (See item 35) 



22 November 2013 



Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Reactors. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEALTH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Services 

• Transportation Systems 

• Information Technology 

• Communic ations 

• Commercial Facilities 
FEDERAL and STATE 

• Government Facilities 

• Emergency Services 



- 1 - 



Energy Sector 



1. November 20, Associated Press - (Indiana) Enb ridge oil pipeline project in Ind. 
delayed. The Indiana segment of Enbridge Energy’s $300 million project to replace 60 
miles of oil pipeline was delayed at least through February 2014 due to delays in 
obtaining needed permits. Construction is about 80 to 90 percent complete on the 
segment. 

Source: 

http://www.iournalgazette.net/article/20131120/LOCAL06/131129936/1006/NEWS 

2. November 20, Detroit News - (Michigan) 52K without power in Michigan; more 
crews on the way. Utility crews continued work to restore electricity to the remaining 
52,000 homes and businesses in Michigan’s Lower Peninsula November 20 after 
severe storms November 17 knocked out power. 

Source: 

http : //w w w .detroitne w s . com/article/20 1311 20/METRQ06/3 1 1 20005 2/ 1 409/METRQ/8 
5 K-still- without-power-Michigan 

For additional stories, see items 4, and 34 
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Chemical Industry Sector 

3. November 19, U.S. Environmental Protection Agency - (Texas; Louisiana) Cabot 
Corporation agrees to spend over $84 million to control harmful air pollution at 
Texas, Louisiana facilities. In a settlement with the U.S. Department of Justice and the 
U.S. Environmental Protection Agency, Cabot Corporation of Boston will pay a 
$975,000 civil penalty and an estimated $84 million on state-of-the-art technology to 
control harmful air pollution to resolve alleged violations of the New Source Review 
provisions of the Clean Air Act at three carbon black facilities in Louisiana and Texas 
between 2003 and 2009. 

Source: http://vosemite.epa.gov/opa/admpress.nsf/ 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. November 20, IDG News Service - (International) Mining companies caught flat- 
footed by cyberattacks. A survey of 39 mining companies conducted by Ernst & 
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Young found that 41 percent reported increased external threats, including 
cybercriminals’ attempts to steal information and disrupt operations, and found that 
sensors and safety systems increasingly linked to the Internet provide new external 
pathways for attackers to gain access to systems 

Source: http://www.networkworld.com/news/2013/112113-mining-companies-caught- 
flat-footed-by-276200.html 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

5. November 21, KGW 8 Portland - (Oregon; California) 3 arrested in Portland for 
$150K in fake cards. Three suspects were arrested in Portland November 19 and 
charged with allegedly making around $150,000 in purchases using fraudulent credit 
cards in Oregon and California. 

Source: http://www.kgw.com/news/local/Trio-arrested-in-Portland-for-150K-in-fake- 
credit-card-purchases— 2327 6226 1 .html 

6. November 20, Softpedia- (International) i2Ninja financial malware uses I2P to 
maintain secure communications. Researchers at Trusteer discovered a piece of 
financial malware dubbed i2Ninja that uses the Invisible Internet Project (I2P) 
networking layer to hide and secure its communications with its command and control 
servers. The malware is capable of stealing information from most browsers and FTP 
clients, injecting HTML code, stealing information from popular poker clients, 
scheduling tasks, and allowing users to search for specific files on a compromised 
system. 

Source: http://news.softpedia.com/news/i2Ninia-Financial-Malware-Uses-I2P-to- 
Maintain-Secure-Communications-402144.shtml 

7. November 20, KSDK 5 St. Louis - (Missouri) Police: Debit card skimming likely 
linked to gas pumps. Police from several jurisdictions around Lake St. Louis are 
investigating reports of around 300 instances of credit card fraud believed to be related 
to skimming devices placed inside gas station pumps. 

Source: http://www.ksdk.com/story/news/crime/2013/ll/20/debit-card-skimming-gas- 
station-pumps/3659457/ 

For another story, see item 34 
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Transportation Systems Sector 



8. November 21, Associated Press - (National) Seat belts to be required on large buses 
by 2016. The National Highway Traffic Safety Administration announced November 
20 that beginning in November 2016 all new tour buses and intercity buses must be 
equipped by manufacturers with three-point lap-shoulder seat belts. 

Source: http://abclocal.go.com/wabc/storv?section=news/national world&id=9334315 

9. November 21, Springfield Republican - (Massachusetts) Freight train fire in Franklin 

County town of Orange triggers large emergency response. A freight car train 
carrying old railroad ties that caught fire on Route 2A in Franklin County suspended 
train service for an undisclosed amount of time in Orange November 20. 

Source: 

http://www.masslive.com/news/index.ssf/2013/ll/freight train car catches fire.html 

10. November 21, Associated Press - (Iowa) Error by co-worker cited in rail worker’s 
death. A National Transportation Safety Board report cited a switchman’s error in not 
ensuring rail cars were properly secured before beginning repair work that killed a 
railroad worker in Mason City in July 2012 when a railroad car rolled into him and 
pinned him between two cars. 

Source: http : //w w w. omaha. com/article/20 131121 /NEW S/131 129754/1707 

11. November 21, WCMH 4 Columbus - (Ohio) U.S. 62 reopens in Fayette County after 
tanker crash. An accident involving a semi-truck carrying propane that overturned in 
Fayette County took out power poles, closed U.S. 62 for several hours, and prompted 
the evacuation of several homes in a half-mile radius of the crash for over 10 hours 
November 20. 

Source: http://www.nbc4i.com/story/24027674/tanker-crash-closes-us-62-in-favette-co 

12. November 21, KTVB 7 Boise - (Idaho) Crews to repair damaged stretch of Hwy. 21 
after rock slides. A rock slide that caused damage to three vehicles on Idaho State 
Highway 21 caused the closure of two lanes of the highway near Lucky Peak Dam for 
an undisclosed amount of time, and required repairs to the road scheduled to begin 
November 21. 

Source: http://www.ktvb.com/news/Crash-near-Lucky-Peak-blocks-causes-iniurv- 
slowdowns-23265498 1 .html 

13. November 20, Fountain Hills Times - (Arizona) Gasoline spill brings HAZMAT 
response. A semi-truck that ruptured and spilled between 2,500-4,000 gallons of 
gasoline prompted the evacuation of businesses at Saguaro and Shea boulevards in 
Fountain Hills and reduced southbound traffic to one lane as HAZMAT officials 
cleaned-up the spill November 7. 

Source: http://www.fhtimes.com/news/local news/article daea5e86-5 15b- 1 Ie3-8d4b- 
001a4bcf6878.html 

14. November 20, Fox News - (National) FAA to check overweight pilots, air traffic 
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controllers. The Federal Aviation Administration announced that pilots and air traffic 
controllers with a body mass index of 40 and up will be subject to closer medical 
evaluations over concerns that their weight can cause obstructive sleep apnea and to 
assure there is no influence to their work performance. 

Source: http://www.foxnews.com/travel/2013/ll/20/faa-to-check-overweight-pilots- 
for-sleep-apnea/ 

15. November 20, Anderson Valley Post - (California) Crashes in and near Anderson 
leave emergency crews scrambling. A vehicle fire and multiple accidents caused by 
rain on Interstate 5 in Anderson closed multiple lanes of traffic for several hours 
November 19. 

Source: http://www.andersonvallevpost.com/news/2013/nov/2Q/crashes-and-near- 
anderson-leave-emergency-crews-sc/ 

16. November 20, Longview Daily News - (Washington) Wire theft damage to Cowlitz 
Way Bridge estimated at $60,000. Cowlitz County prosecutors asked for an 
exceptional sentence, which allows the judge to exceed standard sentencing guidelines, 
against a man arrested August 9 and accused of cutting wires from the Cowlitz Way 
Bridge that caused about $60,000 in damages. 

Source: http://tdn.com/news/local/wire-theft-damage-to-cowlitz-way-bridge-estimated- 
at/article_949256c8 -524b- 1 1 e3- 845 1 -00 1 9bb2963f4.html 



17. November 20, Charlotte Observer - (North Carolina; Texas) Man charged with lying 
to FAA about pilot and mechanic certifications. A Greensboro man working for 
Warriors and Warbirds based in Monroe, Texas, who performed maintenance on planes 
and acted as second-in-command on flights was arrested November 20 and charged 
with lying to the Federal Aviation Administration about his qualifications. 

Source: http://www.charlotteobserver.com/2013/ll/20/4483788/man-charged-with- 
lying-to-faa.html 

18. November 20, Tulsa World - (Oklahoma) NTSB says pilot reported left engine 
failure just before the crash. A National Transportation Safety Board preliminary 
report showed that the pilot of a Mitsubishi MU-2 aircraft that crashed near Owasso 
November 10 reported a left engine failure to air traffic controllers before the crash. 
Source: http://www.aviationpros.com/news/11239810/ntsb-says-inhofe-reported-left- 
engine-failure-just-before-the-crash 

19. November 18, Milford Daily News - (Massachusetts) Passengers evacuated after 
suspicious message found on train. A threatening message found written on the side 
of a Massachusetts Bay Transportation Authority train prompted an evacuation of 40 
passengers on the train at the Forge Park station in Franklin for 80 minutes while 
authorities searched for any suspicious items November 18. Authorities did not find 
anything suspicious, and are investigating the incident. 

Source: http://www.milforddailynews.com/news/x348809859/Passengers-evacuated- 
after-suspicious-message-found-on-train 



Food and Agriculture Sector 

20. November 20, Food Safety News - (National) Black widows found in supermarket 
grapes in several states. Supermarkets in several States pulled inventories of grapes 
after several incidents where live black widow spiders were found in the containers of 
grapes. 

Source: http://www.foodsafetvnews.com/2013/ll/black-widows-found-in-supermarket- 
grapes-in-several-states/ 

21. November 18, Food Safety News - (Colorado) Colorado sheriff charges three men 
with animal abuse after seeing video. Weld County Sheriffs Department charged 
three men working at the Quanah Cattle Company in Denver with animal cruelty 
November 15 when undercover video revealed the alleged abuse. 

Source: http://www.foodsafetynews.com/2013/ll/colorado-sheriff-charges-three-men- 
in-video-with-animal-abuse/ 



For another story, see item 22 
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Water and Wastewater Systems Sector 

22. November 20, San Francisco Chronicle - (California) ‘Dire’ prediction for State 
water allocation. The California Department of Water released their annual water 
allocation estimate November 20, projecting that only 5 percent of requests from 29 
water agencies that serve about two-thirds of the California population will be filled. If 
an official drought is announced and reservoir levels remain low, farmers may have to 
tap into groundwater and cut back on seasonal planting. 

Source: http://www.sfgate.com/bayarea/article/Dire-prediction-for-state-water- 
allocation-4997558.php 
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Healthcare and Public Health Sector 

23. November 20, Associated Press - (Tennessee) Memphis VA hospital faces US House 
investigation. The U.S. House Committee began investigating the Memphis Veterans’ 
Affairs (VA) Medical Center November 20 after a VA inspector general’s report 
October 23 found three patients received substandard care and died. The hospital has 
since established stricter procedures and guidelines for patient care. 

Source: http://www.sfgate.com/news/article/Memphis-VA-hospital-faces-US-House- 
investigation-4997040.php 
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Government Facilities Sector 
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24. November 21, Youngstown Vindicator - (Ohio) Girard school campus to reopen 
today after evacuation. Girard high and intermediate schools were evacuated and 
dismissed November 20 due to a natural gas smell in the buildings. Classes resumed 
November 21 after the fire department and gas company searched the schools and 
deemed them safe. 

Source: http://www.vindy.com/news/2013/nov/21/girard-school-campus-to-reopen- 
today/ 

25. November 20, Long Island Newsday - (New York) Cops: 5 hurt in school bus crash 
in Elmont. Two children and three adults were injured November 20 when a school 
bus and car collided in Elmont. 

Source: http://www.newsdav.com/long-island/nassau/cops-5-hurt-in-school-bus-crash- 
in-elmont- 1.6467741 

26. November 20, Associated Press; Tacoma News Tribune - (Washington) 2 students 
arrested in Wash, high school threat. Two students were arrested November 20 in 
connection with a hoax bomb threat that caused the evacuation and dismissal of classes 
at Bonney Lake High School in Washington November 19. 

Source: http://www.sfgate.com/news/crime/article/2-students-arrested-in-Wash-high- 
school-threat-4997 140.php 

27. November 20, Quincy Herald-Whig - (Missouri) Bomb threat causes early dismissal 
at Monroe City R-l High School. Students were evacuated from and classes were 
dismissed at Monroe City R-l High School in Missouri November 20 after a bomb 
threat was discovered at the school. Authorities searched the school and cleared the 
scene after nothing suspicious was found. 

Source: http://www.whig.com/story/24026329/bomb-threat-causes-early-dismissal-at- 
monroe-city-r- 1 -high-school 

28. November 20, KPIX 5 San Francisco - (California) Power outage forces San Jose 
school to cancel classes. A weather-related power outage forced Silver Creek High 
School in San Jose to cancel classes November 20. 

Source: http://sanfrancisco.cbslocal.com/2013/ll/20/power-outage-forces-san-jose- 
school-to-cancel-classes/ 

29. November 20, Grand Rapids Press - (Michigan) Forest Hills school officials 
temporarily remove 9 buses following bus fire. Nine school buses were removed 
from service by Forest Hills Public Schools officials after a similar bus caught on fire 
November 20 in Grand Rapids Township. Temporary school buses will be used while 
authorities investigate. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2013/ll/forest hills school officials.html 

30. November 20, St. Louis Post-Dispatch - (Illinois) ‘Suspicious’ fire probed at 111. 
congressman’s office. Authorities are investigating a suspicious fire November 18 at a 
then-vacant building that houses an Illinois’ congressman’s office as well as other 



- 7 - 



businesses in Edwardsville, Illinois. 

Source: http://www.firehouse.com/news/11239592/suspicious-fire-probed-at-ill- 
congressmans-office 
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Emergency Services Sector 

31. November 21, Associated Press - (Idaho) Agency ends quarantine at E. Idaho 

women’s prison. The Idaho Department of Corrections ended a quarantine at a section 
of the Pocatello Women’s Correctional Center and resumed visitations after placing the 
90 inmates under the quarantine November 8 after an inmate that transferred to the 
prison tested positive for hepatitis A. 

Source: http://www.enquirerherald.eom/2013/l 1/21/2798280/agency-ends-quarantine- 
at-e-idaho.html 
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Information Technology Sector 

32. November 21, Softpedia - (International) Apache Tomcat servers targeted by self- 
replicating malware. Symantec researchers identified a self-replicating worm that 
acts as a Java Servelet and infects Apache Tomcat servers, and appears to be intended 
for use in distributed denial of service (DDoS) attacks. Command and control servers 
were identified in Taiwan and Luxembourg. 

Source: http://news.softpedia.com/news/Apache-Tomcat-Servers-Targeted-by-Self- 
Replicating-Malware-402549 . shtml 

33. November 21, Help Net Security - (International) SAP trojan based partially on 
Carberp code. Microsoft researchers analyzed the Gamker trojan targeting SAP 
enterprise software and found that at least part of its source code is based on that of 
the Carberp banking trojan. 

Source: http://www.net-security.org/malware news.php?id=2632 

34. November 21, Help Net Security - (International) A look at security effectiveness by 
industry. A BitSight analysis of security ratings at more than 70 Fortune 200 
companies between October 2012 and September 2013 looked at the energy, retail, 
technology, and financial sectors and found that the financial industry rated highest of 
the four in cybersecurity, while the technology industry had the lowest security 
scores, among other findings. 

Source: http://www.net-securitv.org/secworld.php?id=15991 

35. November 20, Dark Reading - (International) Stuxnet’s earlier version much more 
powerful and dangerous, new analysis finds. A researcher at The Langner Group 
analyzed the Stuxnet industrial control systems malware and discovered that an 
earlier version of Stuxnet existed dating back to 2005, and that the earlier version 
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could potentially have conducted much more physically destructive attacks. 

Source: http://www.darkreading.com/attacks-breaches/stuxnets-earlier- version-much- 
more-power/240 164120 

36. November 20, SC Magazine - (International) Bugs hit global payment company 
PayPal. Researchers with Vulnerability Lab reported finding several vulnerabilities 
in PayPal’s software that could be used by cybercriminals to hijack customers’ 
accounts and perform other actions. The vulnerabilities were submitted to PayPal’s 
bug bounty program. 

Source: http://www.scmagazineuk.com/bugs-hit-global-pavment-companv- 
pavpal/article/32 1 828/ 

For another story, see item 6 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

37. November 20, Radio World - (Texas) Encino Broadcasting faces $18,000 fine. 
Encino Broadcasting, the owner of three Texas radio stations, received an $18,000 
proposed fine from the Federal Communications Commission for being late in filing 
for a license renewal. Paperwork filed in August is currently under review as any 
operations after August 1 are unauthorized. 

Source: http://www.radioworld.com/article/encino-broadcasting-faces— fine/222401 
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Commercial Facilities Sector 

38. November 20, KHOU 11 Houston - (Texas) 3 dead, 2 injured in shooting at NW 
Harris County apartments. Three people were killed and two others were injured in 
a shooting at Pepper Mill Place Apartments in Harris County, Texas, November 20. 
Authorities found multiple weapons and narcotics inside the apartment, and are 
searching for the suspected shooter. 

Source: http://www.khou.com/news/crime/BREAKING-3-dead-2-iniured-in-NW- 
Harris-County-shooting— 232741011.html 

For another story, see item 30 
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Dams Sector 



39. November 20, The Star of Grand Coulee - (Washington) Man injured in electrical 
accident at dam. A fire that broke out at the John W. Keys III Pump Generating 
Station at the Grand Coulee Dam November 18 critically injured a Bureau of 
Reclamation employee and caused the plant to be evacuated. 

Source: http://www.grandcoulee.eom/storv/2013/l 1/20/news/man-iniured-in-electrical- 
accident-at-dam/3254.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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